Addonics NAS Adapter 'nas.cgi' Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	34054
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 09 2009 12:00AM
Updated:	Mar 12 2009 02:56PM
Credit:	Mike Cyr, aka h00die
Vulnerable:	Addonics NAS Adapter R3282-1.33c Addonics NAS Adapter NASU2FW41
Not Vulnerable:

Addonics NAS Adapter 'nas.cgi' Multiple Buffer Overflow Vulnerabilities

Addonics NAS Adaptor is prone to multiple buffer-overflow vulnerabilities because the device fails to perform adequate boundary checks on user-supplied input. Note that to leverage these issues, attackers must authenticate with the affected device.

Attackers may leverage these issues to execute arbitrary code in the context of the webserver. Failed attacks will cause denial-of-service conditions.

The following firmware versions are vulnerable:

R3282-1.33c (LOADER32 1.15)
NASU2FW41 (Loader 1.17)

Addonics NAS Adapter 'nas.cgi' Multiple Buffer Overflow Vulnerabilities

The following proof of concept is available:

• /data/vulnerabilities/exploits/34054.sh

Addonics NAS Adapter 'nas.cgi' Multiple Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Addonics NAS Adapter 'nas.cgi' Multiple Buffer Overflow Vulnerabilities

References:

• NAS Adapter Homepage (Addonics)